CVE-2020-7695: HTTP response splitting in uvicorn

The vulnerability stems from improper neutralization of CRLF sequences in HTTP headers. The Snyk PoC demonstrates that user-controlled input (like URL path) is directly used in headers without escaping. The 'send' method in HttpToolsProtocol is responsible for constructing and writing HTTP responses, making it the logical point where header sanitization should occur. The lack of CRLF escaping in this function matches the described vulnerability mechanism. The high confidence comes from the vulnerability's nature (header injection) and the standard ASGI server architecture where response construction occurs in protocol handlers.